This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json) Hash identifier: fjEv6tPpShNOc8jo8jxu0tecREcSWwZK2kh9DB9ANwE= Subject key identifier: CC:05:09:2A:3D:FB:90:4A:07:5D:E9:48:69:97:0B:20:CE:99:96:AB Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1 Certificate serial: 019AF6531008EDBC3ECC573CEC50224B2CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 01:00:29 +0000 Manifest this update: Sun 07 Dec 2025 01:00:29 +0000 Manifest next update: Mon 08 Dec 2025 01:00:29 +0000 Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: 7q+IZo8d00sBe3uxiDmt9ZMIqkJiquSIcVIfaHrm0po=) 2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:10:08:ed:bc:3e:cc:57:3c:ec:50:22:4b:2c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1 Validity Not Before: Dec 7 01:00:29 2025 GMT Not After : Dec 8 01:00:29 2025 GMT Subject: CN=cc05092a3dfb904a075de94869970b20ce9996ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:51:23:14:0a:80:c3:95:94:f5:15:dc:74: 1b:6d:38:a9:d4:9c:ff:27:e0:a8:1e:e2:5d:a4:a8: 67:03:78:2e:a9:20:ba:8a:be:7a:0c:a1:82:ea:19: 4a:8e:a5:b7:f1:ac:b0:14:e3:2a:75:4a:80:62:ec: f9:f7:2d:7b:c6:e1:cc:7f:16:c2:a6:70:0d:00:1a: 0e:74:f9:7f:e4:d0:3d:99:08:47:6d:92:1c:bd:14: 92:53:9a:40:53:24:88:d9:d1:b6:53:ab:87:37:65: 5e:e1:12:d8:da:a4:4b:65:a9:79:36:dc:cc:25:41: ae:7c:37:9d:82:07:ec:b5:13:14:79:61:98:47:31: ab:84:42:cb:d4:99:2d:a3:28:6a:1e:bc:e8:fc:99: 7b:6f:c6:d7:bc:b4:bf:c3:b5:a3:d9:13:96:54:52: bd:d0:60:b8:1d:d0:bf:6c:d0:42:97:fa:04:2f:71: f5:a8:99:ed:fc:60:ec:8f:ff:fb:bb:f2:13:4e:46: 85:53:e3:be:78:8e:96:48:f3:4e:1f:b5:41:0f:fd: e0:83:e2:28:f5:19:2c:65:a0:b9:db:4e:bf:32:ac: 94:cf:10:ad:20:10:eb:ed:ca:ea:5c:02:a7:72:f3: b3:35:73:e7:c4:0f:f3:f9:38:62:eb:5d:8f:f3:5e: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:05:09:2A:3D:FB:90:4A:07:5D:E9:48:69:97:0B:20:CE:99:96:AB X509v3 Authority Key Identifier: keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:e7:67:02:ed:81:92:80:7b:b5:0b:11:a8:9a:0d:5a:a4:55: 53:f1:8e:13:fd:25:0c:e6:69:f0:70:75:c6:98:55:4a:1d:76: 18:6a:9e:72:02:26:3b:6f:69:2b:6b:47:f9:5d:01:25:65:fc: 3b:9b:2b:cb:7b:da:7d:85:6b:9c:73:17:65:b1:d9:f0:6d:82: 4c:9a:5b:99:85:ba:63:96:f7:80:49:0c:c2:c1:5c:f1:16:2a: b7:3b:e0:04:e4:ae:4e:e1:b2:a5:bd:eb:8c:44:1a:19:0b:bf: 46:65:4e:61:ef:b5:5d:c2:ed:56:92:f5:54:00:c7:e6:b0:d8: 55:03:2a:47:96:83:cc:24:80:6f:bb:54:4c:67:d0:30:1f:a2: 1c:1d:1a:15:46:29:01:fe:4b:65:2c:24:e5:1d:b3:55:59:d1: d7:55:92:bc:e7:8b:27:f3:d9:e5:ea:89:ea:df:30:a7:86:23: 38:46:71:6b:8a:0e:6e:36:45:38:69:b0:2d:28:9f:da:a0:fa: 01:19:cc:2e:6a:1d:81:ce:87:6d:77:9f:72:a3:ed:01:18:f7: 6e:d2:ce:26:c3:ee:f6:32:16:78:c4:cb:96:b8:d6:b8:61:8d: f5:c3:70:99:e5:f7:eb:b1:e1:bf:eb:b6:b6:c2:4c:e2:66:3e: 64:9c:3c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UxAI7bw+zFc87FAiSyz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2 N2EwYzEwHhcNMjUxMjA3MDEwMDI5WhcNMjUxMjA4MDEwMDI5WjAzMTEwLwYDVQQD EyhjYzA1MDkyYTNkZmI5MDRhMDc1ZGU5NDg2OTk3MGIyMGNlOTk5NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ZRIxQKgMOVlPUV3HQbbTip1Jz/ J+CoHuJdpKhnA3guqSC6ir56DKGC6hlKjqW38aywFOMqdUqAYuz59y17xuHMfxbC pnANABoOdPl/5NA9mQhHbZIcvRSSU5pAUySI2dG2U6uHN2Ve4RLY2qRLZal5NtzM JUGufDedggfstRMUeWGYRzGrhELL1JktoyhqHrzo/Jl7b8bXvLS/w7Wj2ROWVFK9 0GC4HdC/bNBCl/oEL3H1qJnt/GDsj//7u/ITTkaFU+O+eI6WSPNOH7VBD/3gg+Io 9RksZaC5206/MqyUzxCtIBDr7crqXAKncvOzNXPnxA/z+Thi612P817F1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwFCSo9+5BKB13pSGmXCyDOmZarMB8GA1UdIwQY MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ednAu2B koB7tQsRqJoNWqRVU/GOE/0lDOZp8HB1xphVSh12GGqecgImO29pK2tH+V0BJWX8 O5sry3vafYVrnHMXZbHZ8G2CTJpbmYW6Y5b3gEkMwsFc8RYqtzvgBOSuTuGypb3r jEQaGQu/RmVOYe+1XcLtVpL1VADH5rDYVQMqR5aDzCSAb7tUTGfQMB+iHB0aFUYp Af5LZSwk5R2zVVnR11WSvOeLJ/PZ5eqJ6t8wp4YjOEZxa4oObjZFOGmwLSif2qD6 ARnMLmodgc6HbXefcqPtARj3btLOJsPu9jIWeMTLlrjWuGGN9cNwmeX367Hhv+u2 tsJM4mY+ZJw8nQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:04 2025 by rpki-client